SBOM for web-audio-api 0.5.0

A Rust/Python implementation of the Web Audio API, for use in non-browser contexts

CycloneDX 6 known vulnerabilities

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

web-audio-api.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

web-audio-api.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

auditwheel.cdx.json

CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities

web-audio-api.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

web-audio-api.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 6 known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0176 Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators	High 8.7	pyo3 0.28.3 crates.io	0.29.0
CVE-2025-4574 crossbeam-channel: double free on Drop	Medium 6.3	crossbeam-channel 0.5.14 crates.io	0.5.15
RUSTSEC-2026-0177 Missing `Sync` bound on `PyCFunction::new_closure` closures	Medium 6.3	pyo3 0.28.3 crates.io	0.29.0
RUSTSEC-2026-0441 `pin-utils` is unmaintained	Unknown	pin-utils 0.1.0 crates.io	—
RUSTSEC-2026-0274 Double free / use-after-free in `ReadChunk::commit` when an element's `Drop` panics	Unknown	rtrb 0.3.2 crates.io	0.3.5
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.52.1 crates.io	1.53.3

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]